I'm thinking "veto files" is the option you're looking for.
add the line in smb.conf under the particular share to exclude sub-directories explicitly
path = /var/test
veto files = /var/test/private
more syntax examples here: http://www.samba.org/samba/docs/m...#VETOFILES
yep this sounds about right. But this will hide this veto'ed directory to all users though wont it? I just went over the samba.org link you sent me, and theres no mention of how to allow certain users to access veto'ed directories. I just want to be able to hide the directory (or make it inaccessible) to user pcguest and htpc, but make it accessible (read+write) to my own login (compadmin). Any suggestions on that?